Unable to setup integration with qradar

We are trying to setup the integration using this link:

here is the API call we are using:

curl “https://api.cloudflare.com/client/v4/zones/2ab133509e0be6d6fba4b25f198f0e5d/logpush/jobs
-H “X-Auth-Email: ”
-H “X-Auth-Key: ”
–data ‘{
“name”: “stenograph”,
“logpull_options”: “fields=ClientRequestMethod,EdgeResponseStatus,ClientIP,ClientSrcPort,CacheCacheStatus,ClientCountry,ClientDeviceType,ClientIPClass,ClientMTLSAuthCertFingerprint,ClientMTLSAuthStatus,ClientRegionCode,ClientRequestBytes,ClientRequestHost,ClientRequestPath,ClientRequestProtocol,ClientRequestReferer,ClientRequestScheme,ClientRequestSource,ClientRequestURI,ClientRequestUserAgent,ClientSSLCipher,ClientSSLProtocol,ClientXRequestedWith,EdgeEndTimestamp,EdgeRequestHost,EdgeResponseBodyBytes,EdgeResponseBytes,EdgeServerIP,EdgeStartTimestamp,SecurityActions,SecurityRuleIDs,SecuritySources,OriginIP,OriginResponseStatus,OriginSSLProtocol,ParentRayID,RayID,SecurityAction,WAFAttackScore,SecurityRuleID,SecurityRuleDescription,WAFSQLiAttackScore,WAFXSSAttackScore,EdgeStartTimestamp&timestamps=rfc3339”,
“destination_conf”: logs-console-00959.qradar.ibmcloud.com:8088,
“max_upload_bytes”: 5000000,
“max_upload_records”: 1000,
“dataset”: “http_requests”,
“enabled”: true
}’

this is the error we got in return:

{“errors”:[{“code”:1002,“message”:“error parsing input: invalid JSON syntax”}],“messages”:,“result”:null,“success”:false}

Can you please help us fix this?

It’s a JSON syntax error, as far as I can see make sure this…
logs-console-00959.qradar.ibmcloud.com:8088,
is in quotes…
"logs-console-00959.qradar.ibmcloud.com:8088",

Tried that, still seeing the same error !

silly problem.

We needed to set it in this format : “destination_conf”: “https://logs-console-00959.qradar.ibmcloud.com:8088

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.